9319bca241ce0d1c855120194099663eeef987b550abbb31fe9006174576f590

Analysis

max time kernel
36s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 20:06

Target

9319bca241ce0d1c855120194099663eeef987b550abbb31fe9006174576f590.dll
Size

92KB
MD5

0b55853f293b966ad68c921ce5748840
SHA1

de2a21b5f1dbd9a032fe0c30fd0122b5f7c01e88
SHA256

9319bca241ce0d1c855120194099663eeef987b550abbb31fe9006174576f590
SHA512

fdf05b6b779fb3b063253007d816521b52e21f5f30ded05e43597ebd3e54b723daad83b825c295bf5868d54c2418b0c3dc15e557d6504af2c99a818e8874845f
SSDEEP

1536:+ID7mEVe+fsZr0ItmnKXH99P5ju7/a9Z9OFa:JD6+C0IkKTPFuDa9ZI0

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1144	1776	WerFault.exe	27

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1508 wrote to memory of 1776	1508	rundll32.exe	27
PID 1776 wrote to memory of 1144	1776	rundll32.exe	28
PID 1776 wrote to memory of 1144	1776	rundll32.exe	28
PID 1776 wrote to memory of 1144	1776	rundll32.exe	28
PID 1776 wrote to memory of 1144	1776	rundll32.exe	28

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\9319bca241ce0d1c855120194099663eeef987b550abbb31fe9006174576f590.dll,#1
1⤵
- Suspicious use of WriteProcessMemory
PID:1508
- C:\Windows\SysWOW64\rundll32.exe
  rundll32.exe C:\Users\Admin\AppData\Local\Temp\9319bca241ce0d1c855120194099663eeef987b550abbb31fe9006174576f590.dll,#1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1776
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1776 -s 252
    3⤵
    - Program crash
    PID:1144

memory/1776-55-0x0000000074C91000-0x0000000074C93000-memory.dmp

Filesize
8KB

Download